2022-01-12T19:36:04Z DEBUG Logging to /var/log/ipaclient-install.log 2022-01-12T19:36:04Z DEBUG ipa-client-install was invoked with arguments [] and options: {'unattended': False, 'principal': None, 'prompt_password': False, 'on_master': False, 'ca_cert_files': None, 'force': False, 'configure_firefox': False, 'firefox_dir': None, 'keytab': None, 'mkhomedir': True, 'force_join': True, 'ntp_servers': None, 'ntp_pool': None, 'no_ntp': True, 'force_ntpd': False, 'nisdomain': None, 'no_nisdomain': False, 'ssh_trust_dns': False, 'no_ssh': False, 'no_sshd': False, 'no_sudo': False, 'no_dns_sshfp': False, 'kinit_attempts': None, 'request_cert': False, 'ip_addresses': None, 'all_ip_addresses': False, 'fixed_primary': False, 'permit': False, 'enable_dns_updates': False, 'no_krb5_offline_passwords': False, 'preserve_sssd': False, 'automount_location': None, 'domain_name': None, 'servers': None, 'realm_name': None, 'host_name': None, 'verbose': False, 'quiet': False, 'log_file': None, 'uninstall': False} 2022-01-12T19:36:04Z DEBUG IPA version 4.9.6-6.module+el8.5.0+674+69615a50 2022-01-12T19:36:04Z DEBUG IPA platform rhel 2022-01-12T19:36:04Z DEBUG IPA os-release Rocky Linux 8.5 (Green Obsidian) 2022-01-12T19:36:04Z DEBUG Starting external process 2022-01-12T19:36:04Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:04Z DEBUG Process finished, return code=0 2022-01-12T19:36:04Z DEBUG stdout= 2022-01-12T19:36:04Z DEBUG stderr= 2022-01-12T19:36:04Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:04Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:04Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:04Z DEBUG Starting external process 2022-01-12T19:36:04Z DEBUG args=['sudo', '-V'] 2022-01-12T19:36:04Z DEBUG Process finished, return code=0 2022-01-12T19:36:04Z DEBUG stdout=Sudo version 1.8.29 Configure options: --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu --program-prefix= --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info --prefix=/usr --sbindir=/usr/sbin --libdir=/usr/lib64 --docdir=/usr/share/doc/sudo --disable-root-mailer --with-logging=syslog --with-logfac=authpriv --with-pam --with-pam-login --with-editor=/bin/vi --with-env-editor --with-ignore-dot --with-tty-tickets --with-ldap --with-ldap-conf-file=/etc/sudo-ldap.conf --with-selinux --with-passprompt=[sudo] password for %p: --with-linux-audit --with-sssd Sudoers policy plugin version 1.8.29 Sudoers file grammar version 46 Sudoers path: /etc/sudoers nsswitch path: /etc/nsswitch.conf ldap.conf path: /etc/sudo-ldap.conf ldap.secret path: /etc/ldap.secret Authentication methods: 'pam' Syslog facility if syslog is being used for logging: authpriv Syslog priority to use when user authenticates successfully: notice Syslog priority to use when user authenticates unsuccessfully: alert Ignore '.' in $PATH Send mail if the user is not in sudoers Lecture user the first time they run sudo Require users to authenticate by default Root may run sudo Always set $HOME to the target user's home directory Allow some information gathering to give useful error messages Visudo will honor the EDITOR environment variable Set the LOGNAME and USER environment variables Length at which to wrap log file lines (0 for no wrap): 80 Authentication timestamp timeout: 5.0 minutes Password prompt timeout: 5.0 minutes Number of tries to enter a password: 3 Umask to use or 0777 to use user's: 022 Path to mail program: /usr/sbin/sendmail Flags for mail program: -t Address to send mail to: root Subject line for mail messages: *** SECURITY information for %h *** Incorrect password message: Sorry, try again. Path to lecture status dir: /var/db/sudo/lectured Path to authentication timestamp dir: /run/sudo/ts Default password prompt: [sudo] password for %p: Default user to run commands as: root Value to override user's $PATH with: /sbin:/bin:/usr/sbin:/usr/bin Path to the editor for use by visudo: /bin/vi When to require a password for 'list' pseudocommand: any When to require a password for 'verify' pseudocommand: all File descriptors >= 3 will be closed before executing a command Reset the environment to a default set of variables Environment variables to check for sanity: TZ TERM LINGUAS LC_* LANGUAGE LANG COLORTERM Environment variables to remove: *=()* RUBYOPT RUBYLIB PYTHONUSERBASE PYTHONINSPECT PYTHONPATH PYTHONHOME TMPPREFIX ZDOTDIR READNULLCMD NULLCMD FPATH PERL5DB PERL5OPT PERL5LIB PERLLIB PERLIO_DEBUG JAVA_TOOL_OPTIONS SHELLOPTS BASHOPTS GLOBIGNORE PS4 BASH_ENV ENV TERMCAP TERMPATH TERMINFO_DIRS TERMINFO _RLD* LD_* PATH_LOCALE NLSPATH HOSTALIASES RES_OPTIONS LOCALDOMAIN CDPATH IFS Environment variables to preserve: XAUTHORITY _XKB_CHARSET LINGUAS LANGUAGE LC_ALL LC_TIME LC_TELEPHONE LC_PAPER LC_NUMERIC LC_NAME LC_MONETARY LC_MESSAGES LC_MEASUREMENT LC_IDENTIFICATION LC_COLLATE LC_CTYPE LC_ADDRESS LANG USERNAME QTDIR PS2 PS1 MAIL LS_COLORS KDEDIR HISTSIZE HOSTNAME DISPLAY COLORS Locale to use while parsing sudoers: C Compress I/O logs using zlib Directory in which to store input/output logs: /var/log/sudo-io File in which to store the input/output log: %{seq} Add an entry to the utmp/utmpx file when allocating a pty PAM service name to use: sudo PAM service name to use for login shells: sudo-i Attempt to establish PAM credentials for the target user Create a new PAM session for the command to run in Perform PAM account validation management Maximum I/O log sequence number: 0 Enable sudoers netgroup support Check parent directories for writability when editing files with sudoedit Query the group plugin for unknown system groups Allow commands to be run even if sudo cannot write to the audit log Allow commands to be run even if sudo cannot write to the log file Resolve groups in sudoers and match on the group ID, not the name Log entries larger than this value will be split into multiple syslog messages: 960 File mode to use for the I/O log files: 0600 Execute commands by file descriptor instead of by path: digest_only Type of authentication timestamp record: tty Ignore case when matching user names Ignore case when matching group names Log when a command is allowed by sudoers Log when a command is denied by sudoers Don't pre-resolve all group names Local IP address and netmask pairs: 192.168.8.116/255.255.0.0 2804:431:e53a:ec01:c414:522d:1541:db52/ffff:ffff:ffff:ffff:: 2804:431:f700:a62:6741:af7c:887a:30d8/ffff:ffff:ffff:ffff:: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8/ffff:ffff:ffff:ffff:: fe80::c7ec:2b7e:345a:f783/ffff:ffff:ffff:ffff:: Sudoers I/O plugin version 1.8.29 2022-01-12T19:36:04Z DEBUG stderr= 2022-01-12T19:36:04Z DEBUG Deleting invalid keytab: '/etc/krb5.keytab'. 2022-01-12T19:36:04Z DEBUG [IPA Discovery] 2022-01-12T19:36:04Z DEBUG Starting IPA discovery with domain=None, servers=None, hostname=client.CHANGED.com 2022-01-12T19:36:04Z DEBUG Start searching for LDAP SRV record in "CHANGED.com" (domain of the hostname) and its sub-domains 2022-01-12T19:36:04Z DEBUG Search DNS for SRV record of _ldap._tcp.CHANGED.com 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 389 ipa.CHANGED.com. 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 389 ipa2.CHANGED.com. 2022-01-12T19:36:04Z DEBUG [Kerberos realm search] 2022-01-12T19:36:04Z DEBUG Search DNS for TXT record of _kerberos.CHANGED.com 2022-01-12T19:36:04Z DEBUG DNS record found: "CHANGED.com" 2022-01-12T19:36:04Z DEBUG Search DNS for SRV record of _kerberos._udp.CHANGED.com 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 88 ipa2.CHANGED.com. 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 88 ipa.CHANGED.com. 2022-01-12T19:36:04Z DEBUG [LDAP server check] 2022-01-12T19:36:04Z DEBUG Verifying that ipa.CHANGED.com (realm CHANGED.com) is an IPA server 2022-01-12T19:36:04Z DEBUG Init LDAP connection to: ldap://ipa.CHANGED.com:389 2022-01-12T19:36:04Z DEBUG Search LDAP server for IPA base DN 2022-01-12T19:36:04Z DEBUG Check if naming context 'dc=CHANGED,dc=com' is for IPA 2022-01-12T19:36:04Z DEBUG Naming context 'dc=CHANGED,dc=com' is a valid IPA context 2022-01-12T19:36:04Z DEBUG Search for (objectClass=krbRealmContainer) in dc=CHANGED,dc=com (sub) 2022-01-12T19:36:04Z DEBUG Found: cn=CHANGED.com,cn=kerberos,dc=CHANGED,dc=com 2022-01-12T19:36:04Z DEBUG Discovery result: Success; server=ipa.CHANGED.com, domain=CHANGED.com, kdc=ipa2.CHANGED.com,ipa.CHANGED.com, basedn=dc=CHANGED,dc=com 2022-01-12T19:36:04Z DEBUG Validated servers: ipa.CHANGED.com 2022-01-12T19:36:04Z DEBUG will use discovered domain: CHANGED.com 2022-01-12T19:36:04Z DEBUG Start searching for LDAP SRV record in "CHANGED.com" (Validating DNS Discovery) and its sub-domains 2022-01-12T19:36:04Z DEBUG Search DNS for SRV record of _ldap._tcp.CHANGED.com 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 389 ipa.CHANGED.com. 2022-01-12T19:36:04Z DEBUG DNS record found: 0 100 389 ipa2.CHANGED.com. 2022-01-12T19:36:04Z DEBUG DNS validated, enabling discovery 2022-01-12T19:36:04Z DEBUG will use discovered server: ipa.CHANGED.com 2022-01-12T19:36:04Z INFO Discovery was successful! 2022-01-12T19:36:04Z DEBUG will use discovered realm: CHANGED.com 2022-01-12T19:36:04Z DEBUG will use discovered basedn: dc=CHANGED,dc=com 2022-01-12T19:36:04Z INFO Client hostname: client.CHANGED.com 2022-01-12T19:36:04Z DEBUG Hostname source: Machine's FQDN 2022-01-12T19:36:04Z INFO Realm: CHANGED.com 2022-01-12T19:36:04Z DEBUG Realm source: Discovered from LDAP DNS records in ipa.CHANGED.com 2022-01-12T19:36:04Z INFO DNS Domain: CHANGED.com 2022-01-12T19:36:04Z DEBUG DNS Domain source: Discovered LDAP SRV records from CHANGED.com (domain of the hostname) 2022-01-12T19:36:04Z INFO IPA Server: ipa.CHANGED.com 2022-01-12T19:36:04Z DEBUG IPA Server source: Discovered from LDAP DNS records in ipa.CHANGED.com 2022-01-12T19:36:04Z INFO BaseDN: dc=CHANGED,dc=com 2022-01-12T19:36:04Z DEBUG BaseDN source: From IPA server ldap://ipa.CHANGED.com:389 2022-01-12T19:36:07Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:07Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:07Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:07Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:07Z DEBUG Starting external process 2022-01-12T19:36:07Z DEBUG args=['/usr/sbin/ipa-rmkeytab', '-k', '/etc/krb5.keytab', '-r', 'CHANGED.com'] 2022-01-12T19:36:07Z DEBUG Process finished, return code=7 2022-01-12T19:36:07Z DEBUG stdout= 2022-01-12T19:36:07Z DEBUG stderr=Failed to set cursor 'No such file or directory' 2022-01-12T19:36:07Z INFO Skipping chrony configuration 2022-01-12T19:36:12Z DEBUG will use principal provided as option: ricardo.alonso 2022-01-12T19:36:12Z DEBUG Starting external process 2022-01-12T19:36:12Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:12Z DEBUG Process finished, return code=0 2022-01-12T19:36:12Z DEBUG stdout= 2022-01-12T19:36:12Z DEBUG stderr= 2022-01-12T19:36:12Z DEBUG Starting external process 2022-01-12T19:36:12Z DEBUG args=['/sbin/restorecon', '/etc/krb5.conf.d/freeipa'] 2022-01-12T19:36:12Z DEBUG Process finished, return code=0 2022-01-12T19:36:12Z DEBUG stdout= 2022-01-12T19:36:12Z DEBUG stderr= 2022-01-12T19:36:12Z DEBUG Starting external process 2022-01-12T19:36:12Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2022-01-12T19:36:12Z DEBUG Process finished, return code=0 2022-01-12T19:36:12Z DEBUG stdout=633266651 2022-01-12T19:36:12Z DEBUG stderr= 2022-01-12T19:36:12Z DEBUG Enabling persistent keyring CCACHE 2022-01-12T19:36:12Z DEBUG Writing Kerberos configuration to /tmp/tmpbnrkiwjh: 2022-01-12T19:36:12Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = CHANGED.com dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] CHANGED.com = { kdc = ipa.CHANGED.com:88 master_kdc = ipa.CHANGED.com:88 admin_server = ipa.CHANGED.com:749 kpasswd_server = ipa.CHANGED.com:464 default_domain = CHANGED.com pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .CHANGED.com = CHANGED.com CHANGED.com = CHANGED.com client.CHANGED.com = CHANGED.com 2022-01-12T19:36:12Z DEBUG Writing configuration file /tmp/tmpbnrkiwjh 2022-01-12T19:36:12Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = CHANGED.com dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] CHANGED.com = { kdc = ipa.CHANGED.com:88 master_kdc = ipa.CHANGED.com:88 admin_server = ipa.CHANGED.com:749 kpasswd_server = ipa.CHANGED.com:464 default_domain = CHANGED.com pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .CHANGED.com = CHANGED.com CHANGED.com = CHANGED.com client.CHANGED.com = CHANGED.com 2022-01-12T19:36:15Z DEBUG Initializing principal ricardo.alonso@CHANGED.com using password 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/bin/kinit', 'ricardo.alonso@CHANGED.com', '-c', '/tmp/krbcc9w01zmno/ccache'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout=Password for ricardo.alonso@CHANGED.com: 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG trying to retrieve CA cert via LDAP from ipa.CHANGED.com 2022-01-12T19:36:15Z DEBUG retrieving schema for SchemaCache url=ldap://ipa.CHANGED.com:389 conn= 2022-01-12T19:36:15Z INFO Successfully retrieved CA cert Subject: CN=Certificate Authority,O=CHANGED.com Issuer: CN=Certificate Authority,O=CHANGED.com Valid From: 2019-02-28 09:31:59 Valid Until: 2039-02-28 09:31:59 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/ipa-join', '-s', 'ipa.CHANGED.com', '-b', 'dc=CHANGED,dc=com', '-h', 'client.CHANGED.com', '-k', '/etc/krb5.keytab', '-f'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr=Keytab successfully retrieved and stored in: /etc/krb5.keytab 2022-01-12T19:36:15Z INFO Enrolled in IPA realm CHANGED.com 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/bin/kdestroy'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Initializing principal host/client.CHANGED.com@CHANGED.com using keytab /etc/krb5.keytab 2022-01-12T19:36:15Z DEBUG using ccache /etc/ipa/.dns_ccache 2022-01-12T19:36:15Z DEBUG Attempt 1/5: success 2022-01-12T19:36:15Z DEBUG Backing up system configuration file '/etc/ipa/default.conf' 2022-01-12T19:36:15Z DEBUG -> Not backing up - '/etc/ipa/default.conf' doesn't exist 2022-01-12T19:36:15Z DEBUG Writing configuration file /etc/ipa/default.conf 2022-01-12T19:36:15Z DEBUG #File modified by ipa-client-install [global] basedn = dc=CHANGED,dc=com realm = CHANGED.com domain = CHANGED.com server = ipa.CHANGED.com host = client.CHANGED.com xmlrpc_uri = https://ipa.CHANGED.com/ipa/xml enable_ra = True 2022-01-12T19:36:15Z INFO Created /etc/ipa/default.conf 2022-01-12T19:36:15Z DEBUG Backing up system configuration file '/etc/sssd/sssd.conf' 2022-01-12T19:36:15Z DEBUG -> Not backing up - '/etc/sssd/sssd.conf' doesn't exist 2022-01-12T19:36:15Z DEBUG New SSSD config will be created 2022-01-12T19:36:15Z DEBUG Backing up system configuration file '/etc/authselect/user-nsswitch.conf' 2022-01-12T19:36:15Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:15Z DEBUG Updating configuration file /etc/authselect/user-nsswitch.conf 2022-01-12T19:36:15Z DEBUG # # /etc/nsswitch.conf # # Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # Valid databases are: aliases, ethers, group, gshadow, hosts, # initgroups, netgroup, networks, passwd, protocols, publickey, # rpc, services, and shadow. # # Valid service provider entries include (in alphabetical order): # # compat Use /etc files plus *_compat pseudo-db # db Use the pre-processed /var/db files # dns Use DNS (Domain Name Service) # files Use the local files in /etc # hesiod Use Hesiod (DNS) for user lookups # nis Use NIS (NIS version 2), also called YP # nisplus Use NIS+ (NIS version 3) # # See `info libc 'NSS Basics'` for more information. # # Commonly used alternative service providers (may need installation): # # ldap Use LDAP directory server # myhostname Use systemd host names # mymachines Use systemd machine names # mdns*, mdns*_minimal Use Avahi mDNS/DNS-SD # resolve Use systemd resolved resolver # sss Use System Security Services Daemon (sssd) # systemd Use systemd for dynamic user option # winbind Use Samba winbind support # wins Use Samba wins support # wrapper Use wrapper module for testing # # Notes: # # 'sssd' performs its own 'files'-based caching, so it should generally # come before 'files'. # # WARNING: Running nscd with a secondary caching service like sssd may # lead to unexpected behaviour, especially with how long # entries are cached. # # Installation instructions: # # To use 'db', install the appropriate package(s) (provide 'makedb' and # libnss_db.so.*), and place the 'db' in front of 'files' for entries # you want to be looked up first in the databases, like this: # # passwd: db files # shadow: db files # group: db files # In order of likelihood of use to accelerate lookup. passwd: sss files systemd shadow: files sss group: sss files systemd hosts: files dns myhostname services: files sss netgroup: sss automount: files sss aliases: files ethers: files gshadow: files # Allow initgroups to default to the setting for group. # initgroups: files networks: files dns protocols: files publickey: files rpc: files sudoers: files sss 2022-01-12T19:36:15Z INFO Configured sudoers in /etc/authselect/user-nsswitch.conf 2022-01-12T19:36:15Z INFO Configured /etc/sssd/sssd.conf 2022-01-12T19:36:15Z DEBUG Backing up system configuration file '/etc/krb5.conf' 2022-01-12T19:36:15Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/sbin/restorecon', '/etc/krb5.conf.d/freeipa'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout=633266651 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Enabling persistent keyring CCACHE 2022-01-12T19:36:15Z DEBUG Writing Kerberos configuration to /etc/krb5.conf: 2022-01-12T19:36:15Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = CHANGED.com dns_lookup_realm = true rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] CHANGED.com = { pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .CHANGED.com = CHANGED.com CHANGED.com = CHANGED.com client.CHANGED.com = CHANGED.com 2022-01-12T19:36:15Z DEBUG Writing configuration file /etc/krb5.conf 2022-01-12T19:36:15Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = CHANGED.com dns_lookup_realm = true rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] CHANGED.com = { pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .CHANGED.com = CHANGED.com CHANGED.com = CHANGED.com client.CHANGED.com = CHANGED.com 2022-01-12T19:36:15Z INFO Configured /etc/krb5.conf for IPA realm CHANGED.com 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmpwwc60b_z', '-N', '-f', '/tmp/tmpwwc60b_z/pwdfile.txt', '-@', '/tmp/tmpwwc60b_z/pwdfile.txt'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpwwc60b_z'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout=Warning no default label for /tmp/tmpwwc60b_z 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpwwc60b_z/cert9.db'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout=Warning no default label for /tmp/tmpwwc60b_z/cert9.db 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpwwc60b_z/key4.db'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout=Warning no default label for /tmp/tmpwwc60b_z/key4.db 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:15Z DEBUG Process finished, return code=0 2022-01-12T19:36:15Z DEBUG stdout= 2022-01-12T19:36:15Z DEBUG stderr= 2022-01-12T19:36:15Z DEBUG Starting external process 2022-01-12T19:36:15Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpwwc60b_z/pkcs11.txt'] 2022-01-12T19:36:16Z DEBUG Process finished, return code=0 2022-01-12T19:36:16Z DEBUG stdout=Warning no default label for /tmp/tmpwwc60b_z/pkcs11.txt 2022-01-12T19:36:16Z DEBUG stderr= 2022-01-12T19:36:16Z DEBUG Starting external process 2022-01-12T19:36:16Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:16Z DEBUG Process finished, return code=0 2022-01-12T19:36:16Z DEBUG stdout= 2022-01-12T19:36:16Z DEBUG stderr= 2022-01-12T19:36:16Z DEBUG Starting external process 2022-01-12T19:36:16Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpwwc60b_z/pwdfile.txt'] 2022-01-12T19:36:16Z DEBUG Process finished, return code=0 2022-01-12T19:36:16Z DEBUG stdout=Warning no default label for /tmp/tmpwwc60b_z/pwdfile.txt 2022-01-12T19:36:16Z DEBUG stderr= 2022-01-12T19:36:16Z DEBUG Starting external process 2022-01-12T19:36:16Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmpwwc60b_z', '-A', '-n', 'CA certificate 1', '-t', 'C,,', '-a', '-f', '/tmp/tmpwwc60b_z/pwdfile.txt'] 2022-01-12T19:36:16Z DEBUG Process finished, return code=0 2022-01-12T19:36:16Z DEBUG stdout= 2022-01-12T19:36:16Z DEBUG stderr= 2022-01-12T19:36:16Z DEBUG failed to find session_cookie in persistent storage for principal 'host/client.CHANGED.com@CHANGED.com' 2022-01-12T19:36:16Z DEBUG trying https://ipa.CHANGED.com/ipa/json 2022-01-12T19:36:16Z DEBUG New HTTP connection (ipa.CHANGED.com) 2022-01-12T19:36:16Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=gjFWn2MRj2MCh5jftvXOa5VSug4GyEx0DkurQNpjD3i6GD7Vo8GbyZyedfd4VSJn6sRxYfC6uehGY%2fOYkmGsaiAZIJpWlPgyRZEfRgIXn4jiT45c49d9%2buXBayg9EeuCv34i1WOBl0P0ICkU6VqdpM2AtFWPpHgEUBDcPQe6ChkRTKMZZfL6LrJe%2bZLjOf4jOf6JwrcxiZ%2fOgVIYSrp61VzdY%2bEwP87wi76xywFThV96Wm5AsyzI%2fRnIrxvpvWSXnp2fbCDQZ7pNstn5ri2MbXao5pJHI0XLXSB2KLCtb2E%3d;path=/ipa;httponly;secure;']' 2022-01-12T19:36:16Z DEBUG storing cookie 'ipa_session=MagBearerToken=gjFWn2MRj2MCh5jftvXOa5VSug4GyEx0DkurQNpjD3i6GD7Vo8GbyZyedfd4VSJn6sRxYfC6uehGY%2fOYkmGsaiAZIJpWlPgyRZEfRgIXn4jiT45c49d9%2buXBayg9EeuCv34i1WOBl0P0ICkU6VqdpM2AtFWPpHgEUBDcPQe6ChkRTKMZZfL6LrJe%2bZLjOf4jOf6JwrcxiZ%2fOgVIYSrp61VzdY%2bEwP87wi76xywFThV96Wm5AsyzI%2fRnIrxvpvWSXnp2fbCDQZ7pNstn5ri2MbXao5pJHI0XLXSB2KLCtb2E%3d;' for principal host/client.CHANGED.com@CHANGED.com 2022-01-12T19:36:16Z DEBUG Created connection context.rpcclient_139932561411712 2022-01-12T19:36:16Z DEBUG [try 1]: Forwarding 'schema' to json server 'https://ipa.CHANGED.com/ipa/json' 2022-01-12T19:36:16Z DEBUG HTTP connection keep-alive (ipa.CHANGED.com) 2022-01-12T19:36:16Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=K9J4mxzyLsq3ukmZSKe8xfKYkPmyfmjUdTGA8%2bkkGIvc2ZJCoA2pLduHSl4kIegSKnVwXz4fpz6GPvqOMnj23A4hcKHMmqSyup9o4PRkrcWQABO%2fIlhWBYTRFmVu5dW8EoKysU5Wp9kxTDqWlA0jCSi4YZ0vARsy%2bWvHDJSpN%2bN36V2J69aJ1ltDcFFy1CjlJ3cEwiWkFiqnclucFm1I%2brSIexCwBBljl2uxV%2fPkUPrYpe%2bFVTNaaTXSnZXCZ1tqYhT9KQW33gRpyJeHsVGLE3j%2byNnOSeKSWO03lwXbmFQ%3d;path=/ipa;httponly;secure;']' 2022-01-12T19:36:16Z DEBUG storing cookie 'ipa_session=MagBearerToken=K9J4mxzyLsq3ukmZSKe8xfKYkPmyfmjUdTGA8%2bkkGIvc2ZJCoA2pLduHSl4kIegSKnVwXz4fpz6GPvqOMnj23A4hcKHMmqSyup9o4PRkrcWQABO%2fIlhWBYTRFmVu5dW8EoKysU5Wp9kxTDqWlA0jCSi4YZ0vARsy%2bWvHDJSpN%2bN36V2J69aJ1ltDcFFy1CjlJ3cEwiWkFiqnclucFm1I%2brSIexCwBBljl2uxV%2fPkUPrYpe%2bFVTNaaTXSnZXCZ1tqYhT9KQW33gRpyJeHsVGLE3j%2byNnOSeKSWO03lwXbmFQ%3d;' for principal host/client.CHANGED.com@CHANGED.com 2022-01-12T19:36:16Z DEBUG Destroyed connection context.rpcclient_139932561411712 2022-01-12T19:36:16Z DEBUG importing all plugin modules in ipaclient.remote_plugins.schema$eee8903e... 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.remote_plugins.schema$eee8903e.plugins 2022-01-12T19:36:16Z DEBUG importing all plugin modules in ipaclient.plugins... 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.automember 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.automount 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.ca 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.cert 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.certmap 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.certprofile 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.dns 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.hbacrule 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.hbactest 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.host 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.idrange 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.internal 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.location 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.migration 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.misc 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.otptoken 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.otptoken_yubikey 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.passwd 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.permission 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.rpcclient 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.server 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.service 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.sudorule 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.topology 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.trust 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.user 2022-01-12T19:36:16Z DEBUG importing plugin module ipaclient.plugins.vault 2022-01-12T19:36:17Z DEBUG found session_cookie in persistent storage for principal 'host/client.CHANGED.com@CHANGED.com', cookie: 'ipa_session=MagBearerToken=K9J4mxzyLsq3ukmZSKe8xfKYkPmyfmjUdTGA8%2bkkGIvc2ZJCoA2pLduHSl4kIegSKnVwXz4fpz6GPvqOMnj23A4hcKHMmqSyup9o4PRkrcWQABO%2fIlhWBYTRFmVu5dW8EoKysU5Wp9kxTDqWlA0jCSi4YZ0vARsy%2bWvHDJSpN%2bN36V2J69aJ1ltDcFFy1CjlJ3cEwiWkFiqnclucFm1I%2brSIexCwBBljl2uxV%2fPkUPrYpe%2bFVTNaaTXSnZXCZ1tqYhT9KQW33gRpyJeHsVGLE3j%2byNnOSeKSWO03lwXbmFQ%3d' 2022-01-12T19:36:17Z DEBUG setting session_cookie into context 'ipa_session=MagBearerToken=K9J4mxzyLsq3ukmZSKe8xfKYkPmyfmjUdTGA8%2bkkGIvc2ZJCoA2pLduHSl4kIegSKnVwXz4fpz6GPvqOMnj23A4hcKHMmqSyup9o4PRkrcWQABO%2fIlhWBYTRFmVu5dW8EoKysU5Wp9kxTDqWlA0jCSi4YZ0vARsy%2bWvHDJSpN%2bN36V2J69aJ1ltDcFFy1CjlJ3cEwiWkFiqnclucFm1I%2brSIexCwBBljl2uxV%2fPkUPrYpe%2bFVTNaaTXSnZXCZ1tqYhT9KQW33gRpyJeHsVGLE3j%2byNnOSeKSWO03lwXbmFQ%3d;' 2022-01-12T19:36:17Z DEBUG trying https://ipa.CHANGED.com/ipa/session/json 2022-01-12T19:36:17Z DEBUG New HTTP connection (ipa.CHANGED.com) 2022-01-12T19:36:17Z DEBUG Created connection context.rpcclient_139932555466008 2022-01-12T19:36:17Z DEBUG Try RPC connection 2022-01-12T19:36:17Z DEBUG [try 1]: Forwarding 'ping' to json server 'https://ipa.CHANGED.com/ipa/session/json' 2022-01-12T19:36:17Z DEBUG HTTP connection keep-alive (ipa.CHANGED.com) 2022-01-12T19:36:17Z DEBUG [try 1]: Forwarding 'ca_is_enabled' to json server 'https://ipa.CHANGED.com/ipa/session/json' 2022-01-12T19:36:17Z DEBUG HTTP connection keep-alive (ipa.CHANGED.com) 2022-01-12T19:36:17Z DEBUG [try 1]: Forwarding 'config_show' to json server 'https://ipa.CHANGED.com/ipa/session/json' 2022-01-12T19:36:17Z DEBUG HTTP connection keep-alive (ipa.CHANGED.com) 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/bin/certutil', '-d', '/etc/ipa/nssdb', '-N', '-f', '/etc/ipa/nssdb/pwdfile.txt', '-@', '/etc/ipa/nssdb/pwdfile.txt'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/cert9.db'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/key4.db'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/pkcs11.txt'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/sbin/selinuxenabled'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/pwdfile.txt'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Adding CA certificates to the IPA NSS database. 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/etc/ipa/nssdb', '-A', '-n', 'CHANGED.com IPA CA', '-t', 'CT,C,C', '-a', '-f', '/etc/ipa/nssdb/pwdfile.txt'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/bin/update-ca-trust'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=0 2022-01-12T19:36:17Z DEBUG stdout= 2022-01-12T19:36:17Z DEBUG stderr= 2022-01-12T19:36:17Z INFO Systemwide CA database updated. 2022-01-12T19:36:17Z DEBUG The DNS query name does not exist: client.CHANGED.com. 2022-01-12T19:36:17Z WARNING Hostname (client.CHANGED.com) does not have A/AAAA record. 2022-01-12T19:36:17Z DEBUG IP check failed: cannot use loopback IP address 127.0.0.1 2022-01-12T19:36:17Z DEBUG IP check failed: cannot use loopback IP address ::1 2022-01-12T19:36:17Z DEBUG IP check successful: 192.168.8.116 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:e53a:ec01:c414:522d:1541:db52 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:f700:a62:6741:af7c:887a:30d8 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 2022-01-12T19:36:17Z DEBUG IP check failed: cannot use link-local IP address fe80::c7ec:2b7e:345a:f783%bond0 2022-01-12T19:36:17Z DEBUG IP check successful: 192.168.8.116 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:e53a:ec01:c414:522d:1541:db52 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:f700:a62:6741:af7c:887a:30d8 2022-01-12T19:36:17Z DEBUG IP check successful: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 2022-01-12T19:36:17Z DEBUG IP check failed: cannot use link-local IP address fe80::c7ec:2b7e:345a:f783%bond0 2022-01-12T19:36:17Z DEBUG Searching for an interface of IP address: 192.168.8.116 2022-01-12T19:36:17Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 192.168.8.116/255.255.0.0 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Searching for an interface of IP address: 2804:431:e53a:ec01:c414:522d:1541:db52 2022-01-12T19:36:17Z DEBUG Testing local IP address: ::1/128 (interface: lo) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:e53a:ec01:c414:522d:1541:db52/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Searching for an interface of IP address: 2804:431:f700:a62:6741:af7c:887a:30d8 2022-01-12T19:36:17Z DEBUG Testing local IP address: ::1/128 (interface: lo) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:e53a:ec01:c414:522d:1541:db52/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:f700:a62:6741:af7c:887a:30d8/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Searching for an interface of IP address: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 2022-01-12T19:36:17Z DEBUG Testing local IP address: ::1/128 (interface: lo) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:e53a:ec01:c414:522d:1541:db52/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:f700:a62:6741:af7c:887a:30d8/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Testing local IP address: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8/64 (interface: bond0) 2022-01-12T19:36:17Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2022-01-12T19:36:17Z DEBUG debug update delete client.CHANGED.com. IN A show send update delete client.CHANGED.com. IN AAAA show send update add client.CHANGED.com. 1200 IN A 192.168.8.116 show send update add client.CHANGED.com. 1200 IN AAAA 2804:431:e53a:ec01:c414:522d:1541:db52 show send update add client.CHANGED.com. 1200 IN AAAA 2804:431:f700:a62:6741:af7c:887a:30d8 show send update add client.CHANGED.com. 1200 IN AAAA 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 show send 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2022-01-12T19:36:17Z DEBUG Process finished, return code=2 2022-01-12T19:36:17Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY A Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY AAAA Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN A 192.168.8.116 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e53a:ec01:c414:522d:1541:db52 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:f700:a62:6741:af7c:887a:30d8 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 2022-01-12T19:36:17Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63629 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest Found realm from ticket: CHANGED.com tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36945 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1845 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38582 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31745 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7611 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. 2022-01-12T19:36:17Z DEBUG nsupdate (GSS-TSIG) failed: CalledProcessError(Command ['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] returned non-zero exit status 2: 'Reply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63629\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\nFound realm from ticket: CHANGED.com\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36945\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1845\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38582\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31745\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7611\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\n') 2022-01-12T19:36:17Z DEBUG Starting external process 2022-01-12T19:36:17Z DEBUG args=['/usr/bin/nsupdate', '/etc/ipa/.dns_update.txt'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=2 2022-01-12T19:36:18Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY A Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 42686 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY A Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY AAAA Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 33539 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY AAAA Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN A 192.168.8.116 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 33606 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN A 192.168.8.116 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e53a:ec01:c414:522d:1541:db52 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 42522 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e53a:ec01:c414:522d:1541:db52 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:f700:a62:6741:af7c:887a:30d8 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 15826 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:f700:a62:6741:af7c:887a:30d8 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 8844 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN AAAA 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 2022-01-12T19:36:18Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65373 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 42686 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54965 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 33539 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42936 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 33606 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26107 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 42522 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54300 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 15826 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18392 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 8844 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA 2022-01-12T19:36:18Z DEBUG Unauthenticated nsupdate failed: CalledProcessError(Command ['/usr/bin/nsupdate', '/etc/ipa/.dns_update.txt'] returned non-zero exit status 2: 'Reply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65373\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 42686\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54965\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 33539\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42936\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 33606\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26107\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 42522\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54300\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 15826\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18392\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 8844\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\n') 2022-01-12T19:36:18Z ERROR Failed to update DNS records. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: client.CHANGED.com IN A 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: client.CHANGED.com IN AAAA 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: 192.168.8.116 IN PTR 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: 2804:431:e53a:ec01:c414:522d:1541:db52 IN PTR 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: 2804:431:f700:a62:6741:af7c:887a:30d8 IN PTR 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z DEBUG DNS resolver: Query: 2804:431:e03d:b500:fa4:dd91:eb57:d1f8 IN PTR 2022-01-12T19:36:18Z DEBUG DNS resolver: No record. 2022-01-12T19:36:18Z WARNING Missing A/AAAA record(s) for host client.CHANGED.com: 192.168.8.116, 2804:431:e53a:ec01:c414:522d:1541:db52, 2804:431:f700:a62:6741:af7c:887a:30d8, 2804:431:e03d:b500:fa4:dd91:eb57:d1f8. 2022-01-12T19:36:18Z WARNING Missing reverse record(s) for address(es): 192.168.8.116, 2804:431:e53a:ec01:c414:522d:1541:db52, 2804:431:f700:a62:6741:af7c:887a:30d8, 2804:431:e03d:b500:fa4:dd91:eb57:d1f8. 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/bin/systemctl', 'try-restart', 'certmonger.service'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=0 2022-01-12T19:36:18Z DEBUG stdout= 2022-01-12T19:36:18Z DEBUG stderr= 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/bin/systemctl', 'is-active', 'certmonger.service'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=3 2022-01-12T19:36:18Z DEBUG stdout=inactive 2022-01-12T19:36:18Z DEBUG stderr= 2022-01-12T19:36:18Z DEBUG Restart of certmonger.service complete 2022-01-12T19:36:18Z INFO Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub 2022-01-12T19:36:18Z INFO Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub 2022-01-12T19:36:18Z INFO Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub 2022-01-12T19:36:18Z DEBUG [try 1]: Forwarding 'host_mod' to json server 'https://ipa.CHANGED.com/ipa/session/json' 2022-01-12T19:36:18Z DEBUG HTTP connection keep-alive (ipa.CHANGED.com) 2022-01-12T19:36:18Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2022-01-12T19:36:18Z DEBUG debug update delete client.CHANGED.com. IN SSHFP show send update add client.CHANGED.com. 1200 IN SSHFP 4 1 3F889490E12DF839782D2898369472DA85102145 update add client.CHANGED.com. 1200 IN SSHFP 4 2 160FBF3A3FAD6BC566A07D5225D8FF8F75FDACB7B2A6B32FCDF61D9A1EEB37C3 update add client.CHANGED.com. 1200 IN SSHFP 3 1 383F6AA5A1B7CADE6C3D128792CF82FF00F8552E update add client.CHANGED.com. 1200 IN SSHFP 3 2 EBCF0A968B316C042E81B6A7E7148A3E02F506BCB21F600A6B0EE36530D12B74 update add client.CHANGED.com. 1200 IN SSHFP 1 1 39AAA8EFD7ADA7973ECE3AF42CB663A08F20AEEE update add client.CHANGED.com. 1200 IN SSHFP 1 2 A72C0B3E633753501870B5E1F849A9AA3ACFDC0CC3482ED1ABBD90642646325F show send 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=2 2022-01-12T19:36:18Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY SSHFP Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN SSHFP 4 1 3F889490E12DF839782D2898369472DA85102145 client.CHANGED.com. 1200 IN SSHFP 4 2 160FBF3A3FAD6BC566A07D5225D8FF8F75FDACB7B2A6B32FCDF61D9A 1EEB37C3 client.CHANGED.com. 1200 IN SSHFP 3 1 383F6AA5A1B7CADE6C3D128792CF82FF00F8552E client.CHANGED.com. 1200 IN SSHFP 3 2 EBCF0A968B316C042E81B6A7E7148A3E02F506BCB21F600A6B0EE365 30D12B74 client.CHANGED.com. 1200 IN SSHFP 1 1 39AAA8EFD7ADA7973ECE3AF42CB663A08F20AEEE client.CHANGED.com. 1200 IN SSHFP 1 2 A72C0B3E633753501870B5E1F849A9AA3ACFDC0CC3482ED1ABBD9064 2646325F 2022-01-12T19:36:18Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48001 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest Found realm from ticket: CHANGED.com tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61669 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com start_gssrequest tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH. 2022-01-12T19:36:18Z DEBUG nsupdate (GSS-TSIG) failed: CalledProcessError(Command ['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] returned non-zero exit status 2: 'Reply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48001\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\nFound realm from ticket: CHANGED.com\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61669\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nstart_gssrequest\ntkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = KDC returned error string: NO PREAUTH.\n') 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/usr/bin/nsupdate', '/etc/ipa/.dns_update.txt'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=2 2022-01-12T19:36:18Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY SSHFP Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 293 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 0 ANY SSHFP Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN SSHFP 4 1 3F889490E12DF839782D2898369472DA85102145 client.CHANGED.com. 1200 IN SSHFP 4 2 160FBF3A3FAD6BC566A07D5225D8FF8F75FDACB7B2A6B32FCDF61D9A 1EEB37C3 client.CHANGED.com. 1200 IN SSHFP 3 1 383F6AA5A1B7CADE6C3D128792CF82FF00F8552E client.CHANGED.com. 1200 IN SSHFP 3 2 EBCF0A968B316C042E81B6A7E7148A3E02F506BCB21F600A6B0EE365 30D12B74 client.CHANGED.com. 1200 IN SSHFP 1 1 39AAA8EFD7ADA7973ECE3AF42CB663A08F20AEEE client.CHANGED.com. 1200 IN SSHFP 1 2 A72C0B3E633753501870B5E1F849A9AA3ACFDC0CC3482ED1ABBD9064 2646325F Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 55391 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 6, ADDITIONAL: 0 ;; UPDATE SECTION: client.CHANGED.com. 1200 IN SSHFP 4 1 3F889490E12DF839782D2898369472DA85102145 client.CHANGED.com. 1200 IN SSHFP 4 2 160FBF3A3FAD6BC566A07D5225D8FF8F75FDACB7B2A6B32FCDF61D9A 1EEB37C3 client.CHANGED.com. 1200 IN SSHFP 3 1 383F6AA5A1B7CADE6C3D128792CF82FF00F8552E client.CHANGED.com. 1200 IN SSHFP 3 2 EBCF0A968B316C042E81B6A7E7148A3E02F506BCB21F600A6B0EE365 30D12B74 client.CHANGED.com. 1200 IN SSHFP 1 1 39AAA8EFD7ADA7973ECE3AF42CB663A08F20AEEE client.CHANGED.com. 1200 IN SSHFP 1 2 A72C0B3E633753501870B5E1F849A9AA3ACFDC0CC3482ED1ABBD9064 2646325F 2022-01-12T19:36:18Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8211 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 293 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52879 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;client.CHANGED.com. IN SOA ;; AUTHORITY SECTION: CHANGED.com. 0 IN SOA ipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600 Found zone name: CHANGED.com The master is: ipa.CHANGED.com Sending update to 192.168.8.100#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 55391 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; ZONE SECTION: ;CHANGED.com. IN SOA 2022-01-12T19:36:18Z DEBUG Unauthenticated nsupdate failed: CalledProcessError(Command ['/usr/bin/nsupdate', '/etc/ipa/.dns_update.txt'] returned non-zero exit status 2: 'Reply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8211\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 293\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\nReply from SOA query:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52879\n;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\n;; QUESTION SECTION:\n;client.CHANGED.com.\tIN\tSOA\n\n;; AUTHORITY SECTION:\nCHANGED.com.\t\t0\tIN\tSOA\tipa.CHANGED.com. hostmaster.CHANGED.com. 1642016145 3600 900 1209600 3600\n\nFound zone name: CHANGED.com\nThe master is: ipa.CHANGED.com\nSending update to 192.168.8.100#53\n\nReply from update query:\n;; ->>HEADER<<- opcode: UPDATE, status: REFUSED, id: 55391\n;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0\n;; ZONE SECTION:\n;CHANGED.com.\t\t\tIN\tSOA\n\n') 2022-01-12T19:36:18Z WARNING Could not update DNS SSHFP records. 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2022-01-12T19:36:18Z DEBUG Process finished, return code=0 2022-01-12T19:36:18Z DEBUG stdout=UNIT FILE STATE proc-sys-fs-binfmt_misc.automount static -.mount generated boot-efi.mount generated boot.mount generated bricks-brick2.mount generated dev-hugepages.mount static dev-mqueue.mount static home.mount generated proc-fs-nfsd.mount static proc-sys-fs-binfmt_misc.mount static sys-fs-fuse-connections.mount static sys-kernel-config.mount static sys-kernel-debug.mount static tmp.mount disabled var-lib-nfs-rpc_pipefs.mount static systemd-ask-password-console.path static systemd-ask-password-plymouth.path static systemd-ask-password-wall.path static libpod-455da5c4c713aae9b1c87a97bb399c39e129ff23696c64b11a9790334b9787d7.scope transient libpod-conmon-455da5c4c713aae9b1c87a97bb399c39e129ff23696c64b11a9790334b9787d7.scope transient session-10.scope transient auditd.service enabled auth-rpcgss-module.service static autofs.service disabled autovt@.service enabled blk-availability.service disabled certmonger.service disabled chrony-dnssrv@.service static chrony-wait.service disabled chronyd.service enabled cockpit-motd.service static cockpit-wsinstance-http-redirect.service static cockpit-wsinstance-http.service static cockpit-wsinstance-https-factory@.service static cockpit-wsinstance-https@.service static cockpit.service static console-getty.service disabled container-getty@.service static cpupower.service disabled crond.service enabled dbus-org.fedoraproject.FirewallD1.service enabled dbus-org.freedesktop.hostname1.service static dbus-org.freedesktop.locale1.service static dbus-org.freedesktop.login1.service static dbus-org.freedesktop.nm-dispatcher.service enabled dbus-org.freedesktop.portable1.service static dbus-org.freedesktop.timedate1.service enabled dbus.service static debug-shell.service disabled dm-event.service static dnf-makecache.service static dracut-cmdline.service static dracut-initqueue.service static dracut-mount.service static dracut-pre-mount.service static dracut-pre-pivot.service static dracut-pre-trigger.service static dracut-pre-udev.service static dracut-shutdown.service static ebtables.service disabled emergency.service static firewalld.service enabled fstrim.service static fwupd-offline-update.service static fwupd-refresh.service static fwupd.service static getty@.service enabled grub-boot-indeterminate.service static gssproxy.service disabled halt-local.service static import-state.service enabled initrd-cleanup.service static initrd-parse-etc.service static initrd-switch-root.service static initrd-udevadm-cleanup-db.service static iprdump.service disabled iprinit.service disabled iprupdate.service disabled irqbalance.service enabled iscsi-onboot.service enabled iscsi-shutdown.service static iscsi.service enabled iscsid.service disabled iscsiuio.service disabled kdump.service enabled kmod-static-nodes.service static kvm_stat.service disabled ldconfig.service static loadmodules.service enabled lvm2-lvmpolld.service static lvm2-monitor.service enabled lvm2-pvscan@.service static man-db-cache-update.service static man-db-restart-cache-update.service disabled mdadm-grow-continue@.service static mdadm-last-resort@.service static mdcheck_continue.service static mdcheck_start.service static mdmon@.service static mdmonitor-oneshot.service static mdmonitor.service enabled messagebus.service static microcode.service enabled multipathd.service enabled NetworkManager-dispatcher.service enabled NetworkManager-wait-online.service enabled NetworkManager.service enabled nfs-blkmap.service disabled nfs-convert.service disabled nfs-idmapd.service static nfs-mountd.service static nfs-server.service disabled nfs-utils.service static nfsdcld.service static nftables.service disabled nis-domainname.service enabled oddjobd.service disabled packagekit-offline-update.service static packagekit.service static plymouth-halt.service static plymouth-kexec.service static plymouth-poweroff.service static plymouth-quit-wait.service static plymouth-quit.service static plymouth-read-write.service static plymouth-reboot.service static plymouth-start.service static plymouth-switch-root-initramfs.service static plymouth-switch-root.service static podman-auto-update.service disabled podman-restart.service disabled podman.service disabled polkit.service static quotaon.service static rc-local.service static rdisc.service disabled rdma-load-modules@.service static rdma-ndd.service static rescue.service static rpc-gssd.service static rpc-statd-notify.service static rpc-statd.service static rpcbind.service enabled rsyslog.service enabled selinux-autorelabel-mark.service enabled selinux-autorelabel.service static serial-getty@.service disabled sshd-keygen@.service disabled sshd.service enabled sshd@.service static sssd-autofs.service indirect sssd-ifp.service static sssd-kcm.service indirect sssd-nss.service indirect sssd-pac.service indirect sssd-pam.service indirect sssd-ssh.service indirect sssd-sudo.service indirect sssd.service disabled syslog.service enabled system-update-cleanup.service static systemd-ask-password-console.service static systemd-ask-password-plymouth.service static systemd-ask-password-wall.service static systemd-backlight@.service static systemd-binfmt.service static systemd-coredump@.service static systemd-exit.service static systemd-firstboot.service static systemd-fsck-root.service static systemd-fsck@.service static systemd-halt.service static systemd-hibernate-resume@.service static systemd-hibernate.service static systemd-hostnamed.service static systemd-hwdb-update.service static systemd-hybrid-sleep.service static systemd-initctl.service static systemd-journal-catalog-update.service static systemd-journal-flush.service static systemd-journald.service static systemd-kexec.service static systemd-localed.service static systemd-logind.service static systemd-machine-id-commit.service static systemd-modules-load.service static systemd-portabled.service static systemd-poweroff.service static systemd-quotacheck.service static systemd-random-seed.service static systemd-reboot.service static systemd-remount-fs.service static systemd-resolved.service disabled systemd-rfkill.service static systemd-suspend-then-hibernate.service static systemd-suspend.service static systemd-sysctl.service static systemd-sysusers.service static systemd-timedated.service masked systemd-tmpfiles-clean.service static systemd-tmpfiles-setup-dev.service static systemd-tmpfiles-setup.service static systemd-udev-settle.service static systemd-udev-trigger.service static systemd-udevd.service static systemd-update-done.service static systemd-update-utmp-runlevel.service static systemd-update-utmp.service static systemd-user-sessions.service static systemd-vconsole-setup.service static systemd-volatile-root.service static tcsd.service disabled teamd@.service static timedatex.service enabled tuned.service enabled udisks2.service enabled unbound-anchor.service static user-runtime-dir@.service static user@.service static system-cockpithttps.slice static user.slice static cockpit-wsinstance-http-redirect.socket static cockpit-wsinstance-http.socket static cockpit-wsinstance-https-factory.socket static cockpit-wsinstance-https@.socket static cockpit.socket enabled dbus.socket static dm-event.socket enabled iscsid.socket enabled iscsiuio.socket enabled lvm2-lvmpolld.socket enabled multipathd.socket enabled podman.socket disabled rpcbind.socket enabled sshd.socket disabled sssd-autofs.socket disabled sssd-kcm.socket enabled sssd-nss.socket disabled sssd-pac.socket disabled sssd-pam-priv.socket disabled sssd-pam.socket disabled sssd-ssh.socket disabled sssd-sudo.socket disabled syslog.socket static systemd-coredump.socket static systemd-initctl.socket static systemd-journald-audit.socket static systemd-journald-dev-log.socket static systemd-journald.socket static systemd-rfkill.socket static systemd-udevd-control.socket static systemd-udevd-kernel.socket static dev-mapper-centos\x2dswap.swap generated basic.target static bluetooth.target static boot-complete.target static cryptsetup-pre.target static cryptsetup.target static ctrl-alt-del.target enabled default.target indirect emergency.target static exit.target disabled final.target static getty-pre.target static getty.target static graphical.target static halt.target disabled hibernate.target static hybrid-sleep.target static initrd-fs.target static initrd-root-device.target static initrd-root-fs.target static initrd-switch-root.target static initrd.target static iprutils.target disabled kexec.target disabled local-fs-pre.target static local-fs.target static multi-user.target indirect network-online.target static network-pre.target static network.target static nfs-client.target enabled nss-lookup.target static nss-user-lookup.target static paths.target static poweroff.target disabled printer.target static rdma-hw.target static reboot.target enabled remote-cryptsetup.target disabled remote-fs-pre.target static remote-fs.target enabled rescue.target static rpc_pipefs.target static rpcbind.target static runlevel0.target disabled runlevel1.target static runlevel2.target indirect runlevel3.target indirect runlevel4.target indirect runlevel5.target static runlevel6.target enabled selinux-autorelabel.target static shutdown.target static sigpwr.target static sleep.target static slices.target static smartcard.target static sockets.target static sound.target static sshd-keygen.target static suspend-then-hibernate.target static suspend.target static swap.target static sysinit.target static system-update-pre.target static system-update.target static time-sync.target static timers.target static umount.target static chrony-dnssrv@.timer disabled dnf-makecache.timer enabled fstrim.timer disabled fwupd-refresh.timer disabled mdadm-last-resort@.timer static mdcheck_continue.timer disabled mdcheck_start.timer disabled mdmonitor-oneshot.timer disabled podman-auto-update.timer disabled systemd-tmpfiles-clean.timer static unbound-anchor.timer enabled 332 unit files listed. 2022-01-12T19:36:18Z DEBUG stderr= 2022-01-12T19:36:18Z DEBUG Starting external process 2022-01-12T19:36:18Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout=UNIT FILE STATE proc-sys-fs-binfmt_misc.automount static -.mount generated boot-efi.mount generated boot.mount generated bricks-brick2.mount generated dev-hugepages.mount static dev-mqueue.mount static home.mount generated proc-fs-nfsd.mount static proc-sys-fs-binfmt_misc.mount static sys-fs-fuse-connections.mount static sys-kernel-config.mount static sys-kernel-debug.mount static tmp.mount disabled var-lib-nfs-rpc_pipefs.mount static systemd-ask-password-console.path static systemd-ask-password-plymouth.path static systemd-ask-password-wall.path static libpod-455da5c4c713aae9b1c87a97bb399c39e129ff23696c64b11a9790334b9787d7.scope transient libpod-conmon-455da5c4c713aae9b1c87a97bb399c39e129ff23696c64b11a9790334b9787d7.scope transient session-10.scope transient auditd.service enabled auth-rpcgss-module.service static autofs.service disabled autovt@.service enabled blk-availability.service disabled certmonger.service disabled chrony-dnssrv@.service static chrony-wait.service disabled chronyd.service enabled cockpit-motd.service static cockpit-wsinstance-http-redirect.service static cockpit-wsinstance-http.service static cockpit-wsinstance-https-factory@.service static cockpit-wsinstance-https@.service static cockpit.service static console-getty.service disabled container-getty@.service static cpupower.service disabled crond.service enabled dbus-org.fedoraproject.FirewallD1.service enabled dbus-org.freedesktop.hostname1.service static dbus-org.freedesktop.locale1.service static dbus-org.freedesktop.login1.service static dbus-org.freedesktop.nm-dispatcher.service enabled dbus-org.freedesktop.portable1.service static dbus-org.freedesktop.timedate1.service enabled dbus.service static debug-shell.service disabled dm-event.service static dnf-makecache.service static dracut-cmdline.service static dracut-initqueue.service static dracut-mount.service static dracut-pre-mount.service static dracut-pre-pivot.service static dracut-pre-trigger.service static dracut-pre-udev.service static dracut-shutdown.service static ebtables.service disabled emergency.service static firewalld.service enabled fstrim.service static fwupd-offline-update.service static fwupd-refresh.service static fwupd.service static getty@.service enabled grub-boot-indeterminate.service static gssproxy.service disabled halt-local.service static import-state.service enabled initrd-cleanup.service static initrd-parse-etc.service static initrd-switch-root.service static initrd-udevadm-cleanup-db.service static iprdump.service disabled iprinit.service disabled iprupdate.service disabled irqbalance.service enabled iscsi-onboot.service enabled iscsi-shutdown.service static iscsi.service enabled iscsid.service disabled iscsiuio.service disabled kdump.service enabled kmod-static-nodes.service static kvm_stat.service disabled ldconfig.service static loadmodules.service enabled lvm2-lvmpolld.service static lvm2-monitor.service enabled lvm2-pvscan@.service static man-db-cache-update.service static man-db-restart-cache-update.service disabled mdadm-grow-continue@.service static mdadm-last-resort@.service static mdcheck_continue.service static mdcheck_start.service static mdmon@.service static mdmonitor-oneshot.service static mdmonitor.service enabled messagebus.service static microcode.service enabled multipathd.service enabled NetworkManager-dispatcher.service enabled NetworkManager-wait-online.service enabled NetworkManager.service enabled nfs-blkmap.service disabled nfs-convert.service disabled nfs-idmapd.service static nfs-mountd.service static nfs-server.service disabled nfs-utils.service static nfsdcld.service static nftables.service disabled nis-domainname.service enabled oddjobd.service disabled packagekit-offline-update.service static packagekit.service static plymouth-halt.service static plymouth-kexec.service static plymouth-poweroff.service static plymouth-quit-wait.service static plymouth-quit.service static plymouth-read-write.service static plymouth-reboot.service static plymouth-start.service static plymouth-switch-root-initramfs.service static plymouth-switch-root.service static podman-auto-update.service disabled podman-restart.service disabled podman.service disabled polkit.service static quotaon.service static rc-local.service static rdisc.service disabled rdma-load-modules@.service static rdma-ndd.service static rescue.service static rpc-gssd.service static rpc-statd-notify.service static rpc-statd.service static rpcbind.service enabled rsyslog.service enabled selinux-autorelabel-mark.service enabled selinux-autorelabel.service static serial-getty@.service disabled sshd-keygen@.service disabled sshd.service enabled sshd@.service static sssd-autofs.service indirect sssd-ifp.service static sssd-kcm.service indirect sssd-nss.service indirect sssd-pac.service indirect sssd-pam.service indirect sssd-ssh.service indirect sssd-sudo.service indirect sssd.service disabled syslog.service enabled system-update-cleanup.service static systemd-ask-password-console.service static systemd-ask-password-plymouth.service static systemd-ask-password-wall.service static systemd-backlight@.service static systemd-binfmt.service static systemd-coredump@.service static systemd-exit.service static systemd-firstboot.service static systemd-fsck-root.service static systemd-fsck@.service static systemd-halt.service static systemd-hibernate-resume@.service static systemd-hibernate.service static systemd-hostnamed.service static systemd-hwdb-update.service static systemd-hybrid-sleep.service static systemd-initctl.service static systemd-journal-catalog-update.service static systemd-journal-flush.service static systemd-journald.service static systemd-kexec.service static systemd-localed.service static systemd-logind.service static systemd-machine-id-commit.service static systemd-modules-load.service static systemd-portabled.service static systemd-poweroff.service static systemd-quotacheck.service static systemd-random-seed.service static systemd-reboot.service static systemd-remount-fs.service static systemd-resolved.service disabled systemd-rfkill.service static systemd-suspend-then-hibernate.service static systemd-suspend.service static systemd-sysctl.service static systemd-sysusers.service static systemd-timedated.service masked systemd-tmpfiles-clean.service static systemd-tmpfiles-setup-dev.service static systemd-tmpfiles-setup.service static systemd-udev-settle.service static systemd-udev-trigger.service static systemd-udevd.service static systemd-update-done.service static systemd-update-utmp-runlevel.service static systemd-update-utmp.service static systemd-user-sessions.service static systemd-vconsole-setup.service static systemd-volatile-root.service static tcsd.service disabled teamd@.service static timedatex.service enabled tuned.service enabled udisks2.service enabled unbound-anchor.service static user-runtime-dir@.service static user@.service static system-cockpithttps.slice static user.slice static cockpit-wsinstance-http-redirect.socket static cockpit-wsinstance-http.socket static cockpit-wsinstance-https-factory.socket static cockpit-wsinstance-https@.socket static cockpit.socket enabled dbus.socket static dm-event.socket enabled iscsid.socket enabled iscsiuio.socket enabled lvm2-lvmpolld.socket enabled multipathd.socket enabled podman.socket disabled rpcbind.socket enabled sshd.socket disabled sssd-autofs.socket disabled sssd-kcm.socket enabled sssd-nss.socket disabled sssd-pac.socket disabled sssd-pam-priv.socket disabled sssd-pam.socket disabled sssd-ssh.socket disabled sssd-sudo.socket disabled syslog.socket static systemd-coredump.socket static systemd-initctl.socket static systemd-journald-audit.socket static systemd-journald-dev-log.socket static systemd-journald.socket static systemd-rfkill.socket static systemd-udevd-control.socket static systemd-udevd-kernel.socket static dev-mapper-centos\x2dswap.swap generated basic.target static bluetooth.target static boot-complete.target static cryptsetup-pre.target static cryptsetup.target static ctrl-alt-del.target enabled default.target indirect emergency.target static exit.target disabled final.target static getty-pre.target static getty.target static graphical.target static halt.target disabled hibernate.target static hybrid-sleep.target static initrd-fs.target static initrd-root-device.target static initrd-root-fs.target static initrd-switch-root.target static initrd.target static iprutils.target disabled kexec.target disabled local-fs-pre.target static local-fs.target static multi-user.target indirect network-online.target static network-pre.target static network.target static nfs-client.target enabled nss-lookup.target static nss-user-lookup.target static paths.target static poweroff.target disabled printer.target static rdma-hw.target static reboot.target enabled remote-cryptsetup.target disabled remote-fs-pre.target static remote-fs.target enabled rescue.target static rpc_pipefs.target static rpcbind.target static runlevel0.target disabled runlevel1.target static runlevel2.target indirect runlevel3.target indirect runlevel4.target indirect runlevel5.target static runlevel6.target enabled selinux-autorelabel.target static shutdown.target static sigpwr.target static sleep.target static slices.target static smartcard.target static sockets.target static sound.target static sshd-keygen.target static suspend-then-hibernate.target static suspend.target static swap.target static sysinit.target static system-update-pre.target static system-update.target static time-sync.target static timers.target static umount.target static chrony-dnssrv@.timer disabled dnf-makecache.timer enabled fstrim.timer disabled fwupd-refresh.timer disabled mdadm-last-resort@.timer static mdcheck_continue.timer disabled mdcheck_start.timer disabled mdmonitor-oneshot.timer disabled podman-auto-update.timer disabled systemd-tmpfiles-clean.timer static unbound-anchor.timer enabled 332 unit files listed. 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/usr/bin/authselect', 'select', 'sssd', 'with-mkhomedir', 'with-sudo', '--force', '--backup=pre_ipaclient_20220112163619'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout=Backup stored at /var/lib/authselect/backups/pre_ipaclient_20220112163619 Profile "sssd" was selected. The following nsswitch maps are overwritten by the profile: - passwd - group - netgroup - automount - services - sudoers Make sure that SSSD service is configured and enabled. See SSSD documentation for more information. - with-mkhomedir is selected, make sure pam_oddjob_mkhomedir module is present and oddjobd service is enabled and active - systemctl enable --now oddjobd.service 2022-01-12T19:36:19Z DEBUG stderr=[error] File [/etc/authselect/system-auth] is still present [error] File [/etc/authselect/password-auth] is still present [error] File [/etc/authselect/fingerprint-auth] is still present [error] File [/etc/authselect/smartcard-auth] is still present [error] File [/etc/authselect/postlogin] is still present [error] File [/etc/authselect/nsswitch.conf] is still present [error] File [/etc/authselect/dconf-db] is still present [error] File [/etc/authselect/dconf-locks] is still present 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'is-active', 'oddjobd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=3 2022-01-12T19:36:19Z DEBUG stdout=inactive 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'is-enabled', 'oddjobd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=1 2022-01-12T19:36:19Z DEBUG stdout=disabled 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'enable', 'oddjobd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout= 2022-01-12T19:36:19Z DEBUG stderr=Created symlink /etc/systemd/system/multi-user.target.wants/oddjobd.service → /usr/lib/systemd/system/oddjobd.service. 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'start', 'oddjobd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout= 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'is-active', 'oddjobd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout=active 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Start of oddjobd.service complete 2022-01-12T19:36:19Z INFO SSSD enabled 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'restart', 'sssd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout= 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'is-active', 'sssd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout=active 2022-01-12T19:36:19Z DEBUG stderr= 2022-01-12T19:36:19Z DEBUG Restart of sssd.service complete 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/bin/systemctl', 'enable', 'sssd.service'] 2022-01-12T19:36:19Z DEBUG Process finished, return code=0 2022-01-12T19:36:19Z DEBUG stdout= 2022-01-12T19:36:19Z DEBUG stderr=Created symlink /etc/systemd/system/multi-user.target.wants/sssd.service → /usr/lib/systemd/system/sssd.service. 2022-01-12T19:36:19Z DEBUG Backing up system configuration file '/etc/openldap/ldap.conf' 2022-01-12T19:36:19Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:19Z DEBUG Updating configuration file /etc/openldap/ldap.conf 2022-01-12T19:36:19Z DEBUG # File modified by ipa-client-install # We do not want to break your existing configuration, hence: # URI, BASE, TLS_CACERT and SASL_MECH # have been added if they were not set. # In case any of them were set, a comment has been inserted and # "# CONF_NAME modified by IPA" added to the line above. # To use IPA server with openLDAP tools, please comment out your # existing configuration for these options and uncomment the # corresponding lines generated by IPA. # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never # When no CA certificates are specified the Shared System Certificates # are in use. In order to have these available along with the ones specified # by TLS_CACERTDIR one has to include them explicitly: #TLS_CACERT /etc/pki/tls/cert.pem # System-wide Crypto Policies provide up to date cipher suite which should # be used unless one needs a finer grinded selection of ciphers. Hence, the # PROFILE=SYSTEM value represents the default behavior which is in place # when no explicit setting is used. (see openssl-ciphers(1) for more info) #TLS_CIPHER_SUITE PROFILE=SYSTEM # Turning this off breaks GSSAPI used with krb5 when rdns = false SASL_NOCANON on URI ldaps://ipa.CHANGED.com BASE dc=CHANGED,dc=com TLS_CACERT /etc/ipa/ca.crt SASL_MECH GSSAPI 2022-01-12T19:36:19Z INFO Configured /etc/openldap/ldap.conf 2022-01-12T19:36:19Z DEBUG Starting external process 2022-01-12T19:36:19Z DEBUG args=['/usr/bin/getent', 'passwd', 'ricardo.alonso@CHANGED.com'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=ricardo.alonso:*:1342600001:1342600001:Ricardo Alonso:/home/ricardo.alonso:/bin/bash 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Backing up system configuration file '/etc/ssh/ssh_config' 2022-01-12T19:36:20Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:20Z INFO Configured /etc/ssh/ssh_config 2022-01-12T19:36:20Z DEBUG Backing up system configuration file '/etc/ssh/sshd_config' 2022-01-12T19:36:20Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/usr/sbin/sshd', '-t', '-f', '/dev/null', '-o', 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys', '-o', 'AuthorizedKeysCommandUser=nobody'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout= 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z INFO Configured /etc/ssh/sshd_config 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=active 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'restart', 'sshd.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout= 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=active 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Restart of sshd.service complete 2022-01-12T19:36:20Z INFO Configuring CHANGED.com as NIS domain. 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/usr/bin/nisdomainname'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=CHANGED.com 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'is-enabled', 'nis-domainname.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=enabled 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'enable', 'nis-domainname.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout= 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'restart', 'nis-domainname.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout= 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Starting external process 2022-01-12T19:36:20Z DEBUG args=['/bin/systemctl', 'is-active', 'nis-domainname.service'] 2022-01-12T19:36:20Z DEBUG Process finished, return code=0 2022-01-12T19:36:20Z DEBUG stdout=active 2022-01-12T19:36:20Z DEBUG stderr= 2022-01-12T19:36:20Z DEBUG Restart of nis-domainname.service complete 2022-01-12T19:36:20Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2022-01-12T19:36:20Z INFO Client configuration complete. 2022-01-12T19:36:20Z INFO The ipa-client-install command was successful